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Abstract — Good quantum codes, such as quantum MDS codes, 
are typically nondegenerate, meaning that errors of small weight 
require active error-correction, which is — paradoxically — itself 
prone to errors. Decoherence free subspaces, on the other hand, 
do not require active error correction, but perform poorly in 
terms of minimum distance. In this paper, examples of degen- 
erate quantum codes are constructed that have better minimum 
distance than decoherence free subspaces and allow some errors 
of small weight that do not require active error correction. 
In particular, two new families of [[n, 1,> ^/n\] q degenerate 
quantum codes are derived from classical duadic codes. 

I. Introduction 

Suppose that q is a power of a prime p. Recall that an 
[[n, k, d\] q quantum stabilizer code Q is a q k -dimensional 
subspace of C q such that (u\E\u) = (v\E\v) holds for any 
error operator E of weight wt(-E) < d and all \u) , \v) £ 
Q, see [1], [7] for details. The stabilizer code Q is called 
nondegenerate (or pure) if and only if (v\E\v) = q~ n trE 
holds for all errors E of weight wt(E) < d; otherwise, Q is 
called degenerate. Recall that purity and nondegeneracy are 
equivalent notions in the case of stabilizer codes, see [3], [5]. 

In spite of the negative connotations of the term "degener- 
ate", we will argue that degeneracy is an interesting and in 
some sense useful quality of a quantum code. Let us call an 
error nice if and only if it acts by scalar multiplication on 
the stabilizer code. Nice errors do not require any correction, 
which is a nice feature considering the fact that operational 
imprecisions of a quantum computer can introduce errors in a 
correction step (which is the main reason why elaborate fault- 
tolerant implementations are needed). 

If we assume a depolarizing channel, then errors of small 
weight are more likely to occur than errors of large weight. 
If the stabilizer code Q is nondegenerate, then all nice errors 
have weight d or larger, so the most probable errors all require 
(potentially hazardous) active error correction. On the other 
hand, if the stabilizer code is degenerate, then there exist 
nice errors of weight less than the minimum distance. Given 
these observations, it would be particularly interesting to find 
degenerate stabilizer codes with many nice errors of small 
weight. 

Although the first quantum error-correcting code by Shor 
was a degenerate [[9, 1,3]] 2 stabilizer code, it turns out that 
most known quantum stabilizer code families provide pure 
codes. If one insists on a large minimum distance, then 
nondegeneracy seems more or less unavoidable (for example, 
quantum MDS codes are necessarily nondegenerate, see [11]). 



However, the fact that most known stabilizer codes do not have 
nice errors of small weight is the result of more pragmatic 
considerations. 

Let us illustrate this last remark with the CSS construction; 
similar points can be made for other stabilizer code con- 
structions. Suppose we start with a classical self-orthogonal 
[n, k, d] q code C, then one can obtain with the CSS construc- 
tion an [[n,n — 2k,S]) q stabilizer code, where 5 = wt(C \C). 
Since we often do not know the weight distribution of the code 
C, the easiest way to obtain a stabilizer code with minimum 
distance at least 5q is to choose C such that its dual distance 
d 1 - > 60, as this ensures 6 > d > Sq. However, since 
C C C x , the side effect is that all nonscalar nice errors have 
a weight of at least d > d 1 - > Sq. 

Our considerations above suggest a different approach. 
Since we would like to have nice errors of small weight, 
we start with a classical self-orthogonal code C that has a 
small minimum distance, but is chosen such that the vector 
of smallest Hamming weight in the difference set C x \ C is 
large. In general, it is of course difficult is to find a good lower 
bound for the weights in this difference set. 

We illustrate this approach for degenerate quantum stabilizer 
codes that are derived from classical duadic codes. Recall 
that the duadic codes generalize the quadratic residue codes, 
see [9], [14], [15]. We show that one can still obtain a 
surprisingly large minimum distance, considering the fact we 
start with classical codes that are really bad. 

In Section im we recall basic properties of duadic codes. In 
Section [ill] we construct degenerate quantum stabilizer codes 
using the CSS construction. Finally, in Section llVl we obtain 
further quantum stabilizer codes using the Hermitian code 
construction. 

Notation: Throughout this paper, n denotes a positive 
odd integer. If a is an integer coprime to n, then we denote 
by ord„ (a) the multiplicative order of a modulo n. We briefly 
write q = □ mod n to express the fact that q is a quadratic 
residue modulo n. We write p a \\n if and only if the integer 
n is divisible by p a but not by p a+1 . If gcd(a,n) = 1, then 
the map fj, a : i 1— > ai mod n denotes a permutation on the set 
{0, 1, . . . , n — 1}. An element c = (ci, . . . , c„) £ is said 
to be even-like if ^ c i = 0> an ^ odd-like otherwise. A code 
C C F" is said to be even-like if every codeword in C is 
even-like, and odd-like otherwise. 



II. Classical Duadic Codes 

In this section, we recall the definition and basic properties 
of duadic codes of length n over a finite field F g such that 
gcd(n,q) = 1. For each choice, we will obtain a quartet 
of codes: two even-like cyclic codes and two odd-like cyclic 
codes. 

Let 5*0, 5*1 be the defining sets of two cyclic codes of 
length n over F g such that 

1) S n Si = 0, 

2) S US l = S = {1,2,.. .,n- 1}, and 

3) aSi mod n = S( i+1 mo( j 2 ) for some a coprime to n. 

In particular, each Si is a union of g-ary cyclotomic cosets 
modulo n. Since condition 3) implies |So| = | •S'i | , we have 
| Si | = (n— 1)/2, whence n must be odd. The tuple {So, Si, a} 
is called a splitting of n given by the permutation /i a . 

Let a be a primitive ?i-th root of unity over F q . For i £ 
{0, 1}, the odd-like duadic code Di is a cyclic code of length n 
over F g with defining set Si and generator polynomial 

9i(x) = n ( x _ 

jeSi 

The even-like duadic code C; is defined as the even-like 
subcode of Df, thus, it is a cyclic code with defining set 
Si U {0} and generator polynomial (x — l)gi(x). We have 
dim A = (n + l)/2 and dim d = {n- l)/2. 

Theorem 1: Duadic codes of length n over F q exist if and 
only if q = □ mod n. 

Proof: This is well-known, see, for example, [15, Theo- 
rem 1] or [6, Theorem 6.3.2, pages 220-221]. ■ 

Although the weight distribution of a duadic code is not 
known in general, the following well-known fact gives partial 
information about the weights of odd-like codewords. 

Lemma 2 ( Square Root Bound): Let D and D\ be a pair 
of odd-like duadic codes of length n over F q . Then their 
minimum odd-like weights in both codes are same, say d a . 
We have 

1) d 2 Q > n, 

2) d 2 Q — d Q + 1 > 7i if the splitting is given by (U_x. 
Proof: See [6, Theorem 6.5.2]. ■ 

III. Quantum Duadic Codes - Euclidean Case 

In this section, we derive quantum stabilizer codes from 
classical duadic code using the well-known CSS construction. 
Recall that in the CSS construction, the existence of an [n, k\] q 
code C and an [n, fc 2 ] g code D such that C C D guarantees 
the existence of an [[n, &2 — /ci , quantum stabilizer code 
with minimum distance d = minwt{(Z? \ C) U (C \ D )}. 

A. Basic Code Constructions 

Recall that two F g -linear codes C\ and C2 are said to be 
equivalent if and only if there exists a monomial matrix M 
and automorphism 7 of F q such that C2 = C1M7, see [6, 
page 25]. We denote equivalence of codes by C\ ~ C?,. For 
us it is relevant that equivalent codes have the same weight 
distribution, see [6, page 25]. 



The permutation map p, a : i 1— > ai mod n also defines an 
action on polynomials in F 5 [a;] by f(x)fx a = f(x a ). This 
induces an action on a cyclic code C over F q by 

Cfx a = {c(x)na I c(x) eC} = {c(x a ) I c(x) E C} . 

Lemma 3: Let C be a cyclic code of length n over F g with 
defining set T. If gcd(a, n) = 1, then the cyclic code C/i a has 
the defining set a~ 1 T. Furthermore, we have Cfi a ~ C. 

Proof: This follows from the definitions, see also [6, 
Corollary 4.4.5] and [6, page 141]. ■ 

Theorem 4: Let n be a positive odd integer, and let q = 

□ mod n. There exist quantum duadic codes with the pa- 
rameters [[71, 1, d]] q , where d 2 > n. If ord n (g) is odd, then 
there also exist quantum duadic codes with minimum distance 
d 2 - d + 1 > n. 

Proof: Let N = {0, 1, . . . , n— 1}. If q = □ mod n, then 
there exist duadic codes Ci C Di, for i G {0, 1}. Suppose that 
the defining set of Di is given by Su thus, the defining set of 
the even-like subcode d is given by Si U {0}. It follows that 
Ct has defining set —(TV \ ({0} U Si)) = -S (i+lmod2 ). 
Using Lemma |5] we obtain = f(i+imod 2)/'-i ~ 

D(i+\ mod 2) an d D i = C(i + 1 mo d 2) A* — 1 ~ C(!+lmod2)- 

By the CSS construction, there exists an [[n, (n + l)/2 — 
(n— 1)/2, d]] q quantum stabilizer code with minimum distance 
d = min{wt((A \ d) U {C^ \ D±))}. Since C/- - 
D {i+ i m od 2) and - C (i+l mod 2 ), the minimum distance 
d = min{wt((A\Q)U(D( i+ i mod 2)\C(i+i mod 2))}, which 
is nothing but the minimum odd-like weight of the duadic 
codes; hence d 2 > n. If ord„(q) is odd, then gives a 
splitting of 71 [12, Lemma 5]. In this case, Lemma |2] implies 
that the odd-like weight d satisfies d 2 — d + 1 > n. ■ 
In the binary case, it is possible to derive degenerate codes 
with similar parameters using topological constructions [2], 
[4], [8], but the codes do not appear to be equivalent to the 
construction given here. 

B. Degenerate Codes 

The next result proves the existence of degenerate duadic 
quantum stabilizer codes. This results shows that the classical 
duadic codes, such as Ci C Di, contain codewords of very 
small weight but their set difference Di \ Ci (and C^ \ D^~) 
does not. First we need the following lemma, which shows 
the existence of duadic codes of low distance. 

Lemma 5: Let n = II ^ e an integer and q = 

□ mod pi. If ti = oid Pi (q) and p^Wq*' — 1, and rrii > 2zi, 
then there exists a duadic code of length n and (even-like) 
minimum distance < min{p?*} < y/ri. 

Proof: By Theorem^there exist duadic codes of lengths 
p™ i and by [15, Theorem 6] their minimum distance, d[ is 
less than pf*. Since we know that the odd-like distance is 
> pT' /2 > pf , the minimum distance must be even-like. 
By [15, Theorem 4], there exists duadic codes of length 
71 = Jl-P™* w h ose minimum distance d 1 < min{^} < 
min{p| i } < Y[pT ^ 2 = V™- Since this is less than the 



minimum odd-like distance, the minimum distance is even- 
like. ■ 

Theorem 6: Let n = n^i™* ^> e an °dd integer and q = 
□ mod pi. Let ti = ord Pi (q), and let z, be such that \\q li — 
1. Then for m, > 2zi, there exists a degenerate \[n, 1, d]] g 
quantum code pure to d! < min{p^} < d with d 2 > n. If 
Pi = — 1 mod 4, then d 2 — <i + 1 > n. 

Proof: From Lemma [3] we know that there exist duadic 
codes of length n and minimum (even-like) distance d' < 
minjp^ } < *Jn. From Theorem |4] we know there exists a 
quantum duadic code with parameters [[n, l,d]], where d > 
y/n > d'. Hence, the quantum code is degenerate. 

If pi = — 1 mod 4, then by [15, Theorem 8], the permu- 
tation gives a splitting for this code. Hence the odd-like 
distance must satisfy d 2 — d + 1. ■ 

Example 7: Let us consider binary quantum duadic codes 
of length 7™. Note that 2 is a quadratic residue modulo 7 as 
4 2 = 2 mod 7. Since ord 7 (2) = 3 and 7||2 3 - 1, we have 
z = 1. By Theorem [S] for m > 2 there exist quantum codes 
with the parameters [[7™, l,d]]2-Asp=7=— 1 mod 4 we 
have with d 2 — d+ 1 > 7 m . But, d', the distance of the (even- 
like) duadic codes is upper bounded by p z = 7. Hence these 
codes are pure to d! < 7. Actually, using the fact that the true 
distance of the even-like codes is 4 [15] we can show that the 
quantum codes are pure to 4. 

IV. Quantum Duadic Codes - Hermitian Case 

Recall that if there exists an F q 2 -linear [n, k, d] q 2 code C 
such that C ±h C C, then there exists an [[n, 2k — n, > d]] q 
quantum stabilizer code that is pure to d. In this section, we 
construct duadic quantum codes using this construction. Since 
q 2 = □ mod n, duadic codes exist over F q 2 for all n, when 
gcd(n,q 2 ) = 1. 

A. Basic Code Constructions 

Lemma 8: Let C% and Di respectively be the even-like and 
odd-like duadic codes over F q 2, where i € {0,1}. Then 
C i Lh = Di if and only if there is a ^-splitting of n given 
by that is, -qSi = S( i+1 mod 2 ) mod n. 

Proof: See [12, Theorem 4.4]. ■ 

Lemma 9: Let n — YIpT* ^ e an °dd integer such that 
ord„(g) is odd. Then [i- q gives a splitting of n over F q 2. 
In fact (U_x and fi_ q give the same splitting. 

Proof: Suppose that {So, Si, a} be a splitting. We know 
that each Si is an union of some q 2 -ary cyclotomic cosets, so 
q 2 S, ee Si mod n. Now q old "^S l = S t mod n. If ord„(q) = 
2k + 1, then q 2k+1 Si = qSi = Si mod n; hence, fi q fixes each 
Si if the multiplicative order of q modulo n is odd. 

Notice that if oid n (q) is odd, then ord„(g 2 ) is also odd. 
By [13, Lemma 5], we know that there exists a (^-splitting 
of n given by if and only if ord n (q 2 ) is odd. Hence 
—Si ee S7j + i mo( i 2) mod n. Since fj, q fixes Si we have 
-qSi ee S( i+1 mod 2 ) mod n; hence, gives a g 2 -splitting 
of n. 

Conversely, if gives a splitting of n, then — qSi = 

S(i+i mod 2) mod n. But as \i q fixes 5j we have — Si = 



mod 2) mod n. Therefore gives the same splitting 
as n- q . ■ 
Theorem 10: Let n be an odd integer such that ord„(g) 
is odd. Then there exists an [[n, l,d]] q quantum code with 
d 2 - d + 1 > n. 

Proof: By Lemma |9] there exist duadic codes C\ C 
Di with splitting given by [i- q and This means that 

the Ci C C 4 ±h = Dj by Lemma |8l Hence there exists an 
[[n, n — (n — 1), <f|] 9 quantum code with d = wt(£)j \ Ci). As 

gives a splitting, we have d 2 — d+ 1 > n by Lemma|2] ■ 

B. Degenerate codes 

We construct a family of degenerate quantum codes that has 
a large minimum distance. 

Theorem 11: Let n = Wp™* be an odd integer with 
ord„(g) odd and every pi ee —1 mod 4. Let t{ = ord Pi (q 2 ), 
and p Zi \\q 2ti — 1. Then for m t > 2Zi, there exist degenerate 
quantum codes with parameters [[n, l,d]] q pure to d' < 
mm{pf } < d with d 2 - d + 1 > n. 

Proof: From Lemma |5] we know that there exists an 
even-like duadic code with parameters [n, {n — l)/2, d'] q 2 and 
d' < mm{p^ }. 

Then by [15, Theorem 8], we know that for this code 
gives a splitting. By Lemma [5] fj,- q also gives a splitting for 
this code. 

Hence by Theorem ^3 this duadic code gives a quantum 
duadic code [[n, 1, d]] q , which is impure as d' < min{p^} < 
y/n < d. * 
Finally, one can construct more quantum codes, for instance 
when ord„(q) is even, by finding the conditions under which 
gives a splitting of n. 

V. Conclusion 

The motivation for this work was that many good quantum 
error-correcting codes, such as quantum MDS codes, are 
typically pure and thus require active corrective steps for all 
errors of small Hamming weight. At the other extreme are 
decoherence free subspaces (see [10], [16]) that do not require 
any active error correction at all, but perform poorly in terms 
of minimum distance. We pointed out that degenerate quantum 
codes can form a compromise, namely they can reach larger 
minimum distances while allowing at least some nice errors 
of low weight that do not require active error correction. 

We have constructed two families of quantum duadic codes 
with the parameters [[n, 1, > V^]]? an d nave shown that they 
contain large subclasses of degenerate quantum codes. Though 
these codes encode only one qubit, they are interesting because 
they demonstrate that there exist families of classical codes 
which can give rise to remarkable degenerate quantum codes. 
Since these code are cyclic, we know that there exist several 
nice errors of small weight. A more detailed study of the 
weight distribution of classical duadic codes can reveal which 
code are particularly interesting for quantum error-correction. 
We note that generalizations of duadic codes, such as triadic 
and polyadic codes, can be used to obtain degenerate quantum 
codes with higher rates. 
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